Update 3: Malware, scams and RedStation (AS35662, 81.94.192.0/20)

Re-checking the list of domains previously mentioned, shows they're on the move to a new range. This time owned by known crimeware friendly ISP, ROOT SA (aka Root eSolutions, AS5577 212.117.160.0/19, AS44042). The new IP is 212.117.169.106.There's only a handful resolving to the new IP at the time of writing, so presumably the rest are awaiting DNS propagation.http://temp.it-mate.co.uk/